Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: Vw23VOeLMtVx3ek20lGKDSr86Lp5GeX7jBlcg72/hng=
Subject key identifier: 17:F4:6E:90:B2:30:78:89:10:CE:A4:AC:D0:F7:6A:3E:15:07:8B:8D
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 01976929B882AC50E8C047DC802D10B06407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 0614
Signing time: Fri 13 Jun 2025 12:00:31 +0000
Manifest this update: Fri 13 Jun 2025 12:00:31 +0000
Manifest next update: Sat 14 Jun 2025 12:00:31 +0000
Files and hashes: 1: QREl75-pSDzY1cGp7JFGJZqBbdk.roa (hash: 8F8IjWrIbjzgy41ElzsTSysUdH3FvkTJCpcji0/HmYc=)
2: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: WDyrZN5cXrdByELrjCeKQjJOEwksCtw/sac6rvnPU/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:b8:82:ac:50:e8:c0:47:dc:80:2d:10:b0:64:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Jun 13 12:00:31 2025 GMT
Not After : Jun 14 12:00:31 2025 GMT
Subject: CN=17f46e90b230788910cea4acd0f76a3e15078b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:90:10:b7:17:8a:1c:80:48:f3:64:1b:60:
11:d7:94:49:57:60:c1:f2:d9:a6:ae:1a:3f:56:af:
52:89:dc:2f:54:59:37:aa:f7:9c:58:ba:b8:eb:9b:
82:05:4e:4b:e4:c5:2c:a4:ef:75:88:c2:34:8f:76:
71:9a:59:8d:8c:9b:f7:a3:0d:dc:ce:44:32:35:c1:
da:d8:f0:d3:ad:0b:06:a0:43:84:db:5e:a4:c8:46:
09:7a:ac:2b:91:b1:02:1a:e4:47:33:17:89:e9:b3:
ce:bb:9b:ed:04:5b:83:aa:c0:8c:a4:ca:2d:1d:e7:
e8:78:4c:2a:f2:58:59:0a:fa:f0:95:7c:58:2f:cc:
87:42:9a:e7:0e:a8:9b:a8:7a:b9:4b:b0:c0:ec:00:
9a:25:ee:c3:17:b0:6c:6a:1b:57:75:c3:07:b0:66:
0a:4e:c0:72:2a:1d:55:a2:c5:40:88:95:92:92:2b:
0e:79:85:f5:be:ab:97:c7:f5:3a:cb:bb:dd:e7:78:
48:07:72:73:39:e3:1d:0f:b5:04:c0:56:21:e9:64:
14:20:84:5d:c7:1a:bc:67:50:ff:e8:a1:c6:e0:48:
01:6b:cc:94:ca:57:4c:84:1f:25:d7:5a:56:41:62:
ed:98:90:39:10:a3:de:1b:98:49:ac:22:3d:3c:7b:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:6E:90:B2:30:78:89:10:CE:A4:AC:D0:F7:6A:3E:15:07:8B:8D
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ca:75:55:50:de:fe:a3:d6:a0:32:d0:a4:02:b7:e3:00:9b:
8a:63:0e:69:e5:cf:5c:08:12:87:25:50:ae:01:15:56:f7:c8:
82:1b:c6:63:b0:c5:9e:91:af:79:10:50:56:25:aa:d4:94:2c:
67:56:bb:5b:a1:43:71:c9:d1:6c:a3:36:a8:73:cf:0c:f9:2d:
c5:1e:21:0d:f3:0f:6e:76:64:46:74:ba:aa:be:4f:be:52:4c:
05:35:44:60:09:a5:2d:71:2c:56:d6:e4:dc:ad:9d:cb:a1:07:
23:73:23:6d:3b:bf:7d:fb:ea:d6:d0:1a:6a:ea:44:0f:cf:41:
47:3c:6c:9e:b1:bc:f1:22:fe:89:fd:0b:71:11:f6:e8:5c:22:
21:dc:27:f8:42:3b:f9:53:2d:3d:58:5b:e7:ea:80:9b:75:21:
54:cc:68:81:e7:34:94:af:af:25:28:11:30:6f:18:5d:3f:2f:
27:d0:b4:93:11:80:3b:31:ac:cf:e2:36:82:61:16:ae:67:b3:
7c:70:81:a6:ee:9b:ca:04:c2:2b:78:74:1b:50:ce:fd:b1:cc:
bd:7e:13:86:b6:72:ca:65:1f:8a:3f:91:9d:a1:67:d6:3b:b3:
ff:a6:cd:01:e0:32:4b:cc:4b:12:6a:c2:b2:f4:8b:a3:91:70:
f5:a8:30:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKbiCrFDowEfcgC0QsGQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNjA4MjAxZjg4YWVhZTk0ODZiOWZhODcxODlkNzk2YzU0
MDI3ZGQwHhcNMjUwNjEzMTIwMDMxWhcNMjUwNjE0MTIwMDMxWjAzMTEwLwYDVQQD
EygxN2Y0NmU5MGIyMzA3ODg5MTBjZWE0YWNkMGY3NmEzZTE1MDc4YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHWQELcXihyASPNkG2AR15RJV2DB
8tmmrho/Vq9SidwvVFk3qvecWLq465uCBU5L5MUspO91iMI0j3ZxmlmNjJv3ow3c
zkQyNcHa2PDTrQsGoEOE216kyEYJeqwrkbECGuRHMxeJ6bPOu5vtBFuDqsCMpMot
HefoeEwq8lhZCvrwlXxYL8yHQprnDqibqHq5S7DA7ACaJe7DF7BsahtXdcMHsGYK
TsByKh1VosVAiJWSkisOeYX1vquXx/U6y7vd53hIB3JzOeMdD7UEwFYh6WQUIIRd
xxq8Z1D/6KHG4EgBa8yUyldMhB8l11pWQWLtmJA5EKPeG5hJrCI9PHvBhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf0bpCyMHiJEM6krND3aj4VB4uNMB8GA1UdIwQY
MBaAFMtgggH4iurpSGufqHGJ15bFQCfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJDQ0FmaUs2dWxJYTUtb2NZblhsc1ZBSjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mZjEwYTUtMmZhMy00OTQyLWIyYTkt
YmZlNTJiNGFmOGI3LzEveTJDQ0FmaUs2dWxJYTUtb2NZblhsc1ZBSjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mZjEwYTUtMmZhMy00OTQyLWIyYTktYmZlNTJiNGFmOGI3
LzEveTJDQ0FmaUs2dWxJYTUtb2NZblhsc1ZBSjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcp1VVDe
/qPWoDLQpAK34wCbimMOaeXPXAgShyVQrgEVVvfIghvGY7DFnpGveRBQViWq1JQs
Z1a7W6FDccnRbKM2qHPPDPktxR4hDfMPbnZkRnS6qr5PvlJMBTVEYAmlLXEsVtbk
3K2dy6EHI3MjbTu/ffvq1tAaaupED89BRzxsnrG88SL+if0LcRH26FwiIdwn+EI7
+VMtPVhb5+qAm3UhVMxogec0lK+vJSgRMG8YXT8vJ9C0kxGAOzGsz+I2gmEWrmez
fHCBpu6bygTCK3h0G1DO/bHMvX4ThrZyymUfij+RnaFn1juz/6bNAeAyS8xLEmrC
svSLo5Fw9agwWg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:18 2025 by rpki-client